Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/3138392e33382e38302e302f32302d3234203d3e203238323939.roa
File:                     3138392e33382e38302e302f32302d3234203d3e203238323939.roa (raw, json)
Hash identifier:          4rwY7E3ernEhq4b6KqIr1bijgmoGbDpczqE4Exwwu3o=
Subject key identifier:   9A:70:84:56:95:11:14:50:45:DB:5F:47:FF:2E:D0:15:63:AE:AA:CF
Certificate issuer:       /CN=63D2D46E742FC22F105852BE96AF5CD79AC0736B
Certificate serial:       2315C61739EF360E25D840340A487B92CD92A542
Authority key identifier: 63:D2:D4:6E:74:2F:C2:2F:10:58:52:BE:96:AF:5C:D7:9A:C0:73:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63D2D46E742FC22F105852BE96AF5CD79AC0736B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/3138392e33382e38302e302f32302d3234203d3e203238323939.roa
Signing time:             Fri 17 Nov 2023 12:13:22 +0000
ROA not before:           Fri 17 Nov 2023 12:08:22 +0000
ROA not after:            Fri 15 Nov 2024 12:13:22 +0000
asID:                     28299
IP address blocks:        189.38.80.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:15:c6:17:39:ef:36:0e:25:d8:40:34:0a:48:7b:92:cd:92:a5:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63D2D46E742FC22F105852BE96AF5CD79AC0736B
        Validity
            Not Before: Nov 17 12:08:22 2023 GMT
            Not After : Nov 15 12:13:22 2024 GMT
        Subject: CN=9A7084569511145045DB5F47FF2ED01563AEAACF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:65:f2:c4:53:1d:52:c1:90:de:fe:9d:45:50:
                    f6:4d:6b:8e:b3:5a:26:7f:bb:e8:fe:1c:da:c1:5b:
                    8f:3c:b8:8c:bf:02:20:0a:66:67:18:4c:98:db:8b:
                    4a:71:38:9e:4c:44:b1:72:a7:30:10:02:af:bb:c1:
                    43:ed:a9:41:a3:32:61:0a:ad:92:91:3d:01:78:db:
                    e5:4f:e6:d2:ab:d3:3f:b4:4d:97:18:0a:db:7c:46:
                    88:a6:94:5a:01:7e:46:c9:30:41:bc:94:7d:18:4a:
                    7c:8a:0e:a9:ca:0f:48:9e:8e:f5:52:60:a0:4a:b2:
                    44:ee:ae:47:1a:eb:d1:d6:e8:38:2e:64:23:e1:4c:
                    59:48:4b:35:14:ef:e6:07:29:68:ae:f2:02:cd:d6:
                    1a:23:7f:71:c3:82:a4:d1:5b:78:7d:13:75:b5:69:
                    fe:01:88:ba:57:90:c9:b1:19:28:9d:8c:b0:9f:e0:
                    d6:77:98:1c:23:ed:3c:d7:3d:e0:30:0d:56:8c:f4:
                    a9:48:eb:f2:d8:1d:93:2c:44:67:34:1c:73:0b:c9:
                    f6:47:a6:55:76:75:6e:56:e4:46:b8:bb:3d:50:24:
                    7a:f2:4f:62:69:54:48:39:d6:26:b9:7c:6d:54:88:
                    63:60:e9:8b:52:81:94:9b:6d:cf:dc:10:e7:94:2b:
                    0e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:70:84:56:95:11:14:50:45:DB:5F:47:FF:2E:D0:15:63:AE:AA:CF
            X509v3 Authority Key Identifier:
                keyid:63:D2:D4:6E:74:2F:C2:2F:10:58:52:BE:96:AF:5C:D7:9A:C0:73:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/63D2D46E742FC22F105852BE96AF5CD79AC0736B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63D2D46E742FC22F105852BE96AF5CD79AC0736B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/3138392e33382e38302e302f32302d3234203d3e203238323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         77:ef:ab:f8:fe:c2:65:40:bf:ed:0e:dc:5c:75:89:46:3f:04:
         64:95:b9:d4:6a:34:b9:f6:62:02:50:31:4c:36:21:8e:ac:29:
         a5:ee:d1:56:a8:b5:07:50:ae:16:b6:b5:82:da:fa:be:0c:44:
         91:e7:9e:d2:b8:70:9a:31:bb:1f:16:82:a0:b9:0f:33:c2:42:
         61:99:26:52:70:cb:09:02:ba:b8:7b:53:ca:39:0b:54:ad:3e:
         ec:ff:89:67:c1:a3:c3:45:5f:ce:21:d4:f4:fa:f2:25:62:19:
         8e:ba:95:92:8f:bc:90:b5:60:f2:dc:cd:54:dd:a7:a8:ce:21:
         9d:ea:ae:76:26:62:9e:32:98:40:c0:42:b8:b6:ac:35:fd:95:
         52:0c:2a:fd:8f:8d:26:5c:27:48:ca:8f:bd:23:60:0e:ba:ad:
         00:bd:fe:44:c6:6a:20:8b:ac:8c:07:d5:8f:30:71:87:fe:fe:
         d1:3b:02:91:40:58:e6:58:29:2f:1e:92:87:89:69:03:f0:09:
         49:62:a3:31:f9:f5:f4:50:7e:3e:96:7f:61:32:d8:0c:4b:5c:
         37:90:e8:9e:7c:04:8b:6b:30:aa:7f:11:9c:64:24:62:5f:8c:
         80:d4:a9:5f:7b:15:9c:1d:63:9a:96:a1:e1:2f:f1:9e:f7:5b:
         c5:06:76:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org